Increase default TOTP secret size to 320 bits (#4287)

2018-07-03 18:10:35 -04:00 · 2018-07-03 18:10:35 -04:00 · c71ee33057
commit c71ee33057
parent 9d4c1ddfa1
1 changed files with 1 additions and 0 deletions
--- a/routers/user/setting/security_twofa.go
+++ b/routers/user/setting/security_twofa.go
@ -76,6 +76,7 @@ func twofaGenerateSecretAndQr(ctx *context.Context) bool {
 	if otpKey == nil {
 		err = nil // clear the error, in case the URL was invalid
 		otpKey, err = totp.Generate(totp.GenerateOpts{
+			SecretSize:  40,
 			Issuer:      setting.AppName + " (" + strings.TrimRight(setting.AppURL, "/") + ")",
 			AccountName: ctx.User.Name,
 		})